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• The governor of California declared a drought emergency for the State after 3 years of low 
rainfall and some reservoirs and rivers reaching low levels. - Bloomberg News (See item 
12 ) 

• Officials are investigating an outbreak of noro virus at Bay wood Court Retirement 
Community in Castro Valley, California, that has placed the residents under a voluntary 
quarantine for the past 2 weeks. - Hayward Daily Review (See item 15 ) 

• Mississippi Valley State University cancelled evening classes January 16 and closed 
campus until January 21 in order to search all campus buildings after a bomb threat was 
reported. - WTVA 9 Tupelo (See item 17 ) 

• Authorities arrested 3 men and charged them with starting the 1,700-acre Colby Fire in 
California’s San Gabriel Mountains that destroyed 5 homes and damaged 17 other 
structures. - KTLA 5 Los Angeles (See item 18 ) 
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Energy Sector 



See items 20 and 25 
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Chemical Industry Sector 

See item 25 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

1. January 16, Associated Press - (National) Ford recalls 27,933 Edge crossovers. Ford 
announced a recall of 27,933 model year 2012 and 2013 Edge vehicles equipped with 
2.0-liter engines due to an issue that could cause fuel lines to crack and leak. 

Source: http://detroit.cbslocal.com/2014/01/16/ford-recalls-27933-edge-crossovers/ 

2. January 15, CNN - (National) Tesla to recall overheating chargers. Tesla announced 
a recall of 29,000 chargers for its electric vehicles due to the potential for overheating, 
which could cause a fire. 

Source: http://newdav.blogs.cnn.com/2014/01/15/tesla-to-recall-overheating-chargers/ 
For another story, see item 25 
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Defense Industrial Base Sector 



See item 25 
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Financial Services Sector 

3. January 17, Softpedia - (International) Hackers stole 11 Gb of customer information 
from Target’s systems. An analysis of the recent Target customer information data 
breach found that the attack worked in two phases and stole a total of 1 1GB of data. 
Source: http://news.softpedia.com/news/Hackers-Stole-ll-Gb-of-Customer- 
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Information-from-Target-s-Systems-417997.shtml 



4. January 16, SC Magazine - (International) Researchers discover a point-of-sale 
malware written in VBScript. Researchers at IntelCrawler identified a new piece of 
point-of-sale (POS) malware known as Decebal for sale on underweb forums. The 
malware is written in VBScript and can use antivirus bypass techniques. 

Source: http://www.scmagazine.com/researchers-discover-a-point-of-sale-malware- 
written-in- vbscript/article/329775/ 

5. January 16, Orlando Sentinel - (Florida) Orlando couple stole $550,000 in massive 
ID-theft ‘phishing scam,’ FDLE says. Two individuals in Orlando were charged with 
using phishing emails targeting JPMorgan Chase and Wells Fargo customers to steal 
around 400 customers’ account information and request replacement debit cards. The 
pair then allegedly used the cards to purchase money orders and deposit the funds into a 
personal bank account, totaling around $550,000 in stolen funds. 

Source: http://www.orlandosentinel.com/news/local/breakingnews/os-orlando-couple- 
phishing-scam-fdle-201401 16,0,4776959. story 

6. January 16, Associated Press - (National) Neiman Marcus offers update on credit 
card breach. Retailer Neiman Marcus announced January 16 that a recent data breach 
of customer data did not contain payment card PINs or the data of online shoppers. The 
company is continuing to investigate the breach. 

Source: http://abcnews.go.com/Business/wireStorv/neiman-marcus-offers-update- 
credit-card-breach-2 1562189 
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Transportation Systems Sector 

7. January 17, Minot Daily News; Associated Press - (North Dakota) Train derailment 
impacts Amtrak passengers’ trip. A train derailment involving 13 cars on an 
eastbound intermodal train January 16 east of Williston, North Dakota, blocked main 
Burlington Northern and Santa Fe Railway (BNSF) lines and caused passenger train 
delays of 36 to 48 hours. 

Source: http://www.minotdailynews.com/page/content.detail/id/591301/Train- 
derailment-impacts- Amtrak-pas sen gers —trip .html ?nav=5010 

8. January 17, Greensburg Daily News - (Indiana) Ice, snow, crashes prompt police to 
close Interstate 74. More than a dozen vehicle crashes in Decatur County, Indiana, 
caused by ice and snow prompted authorities to close the westbound lanes of Interstate 
74 for over 2 hours January 16. 

Source: http://www.greensburgdailynews.com/local/x651 178374/Ice-snow-crashes- 
prompt-police-to-close-Interstate-74 

9. January 16, Anchorage Daily News - (Alaska) Pickup driver hospitalized after fiery 
Parks Highway collision with semi. An accident on Parks Highway near the Chulitna 



-3 - 



River wayside January 15 closed the highway for about 7 hours and seriously injured 
one man. 

Source : http://www.adn.corn/2014/01/16/3276669/pickup-driver-hospitalized- 
after.html 
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Food and Agriculture Sector 

10. January 16, Food Poisoning Bulletin - (California) Rancho recall of beef products 
for no inspection expands. Rancho Feeding Corporation expanded its recall of beef 
products January 16 to include 420 pounds of 30-pound boxes of its Book Tripe that 
were produced without a full federal inspection, leaving them unfit for human 
consumption. The company previously recalled 41,683 pounds of meat product 
distributed throughout California January 13. 

Source: http://foodpoisoningbulletin.com/2014/rancho-recall-of-beef-products-for-no- 
inspection-expands/ 

11. January 16, U.S. Department of Labor - (Missouri) MFA Inc. cited by US Labor 
Department's OSHA after worker fatally injured at Missouri feed and farm 
supplier. The U.S. Department of Labor’s Occupational Safety and Health 
Administration cited MFA Inc., January 16 for 13 serious safety violations and 
proposed fines totaling $91,000 after an employee was fatally injured at its Aurora, 
Missouri milling plant in August 2013. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25413 

For additional stories, see items 12 and 23 
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Water and Wastewater Systems Sector 

12. January 17, Bloomberg News - (California) California governor declares drought 
emergency. The governor of California declared a drought emergency for the State 
after 3 years of low rainfall and some reservoirs and rivers reaching low levels, and 
called for voluntary water conservation measures. 

Source: http://www.businessweek.com/news/2014-01-17/califomia-governor-brown- 
declares-drought-emergency- 1 

13. January 17, WOWK 13 Huntington - (West Virginia) Boil water advisory issued for 
residents in Cross lanes, Nitro, Sissonville; other areas. Extensive flushing caused a 
water storage tank to drain and West Virginia American Water Company to issue a 
cautionary boil water advisory for several parts of Cross Lanes, Nitro, Nitromarket, and 
Sissonville, West Virginia, January 17. 

Source: http://www.wowktv.com/storv/24477288/boil-water-advisorv-issued-for- 
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residents-in-town-of-pratt-wv-other-areas 



14. January 16, KP1X 5 San Francisco - (California) Marin water district begins 

pumping from backup Phoenix Lake reservoir. The Marin Municipal Water District 
started pumping water from a reserve reservoir in Phoenix Lake January 16 and into the 
districts Bon Tempe Treatment Plant for the next 30 days because of ongoing dry 
weather 

Source: http://sanfrancisco.cbslocal.com/2014/01/16/marin-water-district-begins- 
pumping-from-backup-phoenix-lake-reservoir/ 

For additional stories, see items 20 and 25 
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Healthcare and Public Health Sector 

15. January 16, Hayward Daily Review - (California) Noro virus outbreak at Castro 
Valley senior living facility quarantines residents. Officials are investigating an 
outbreak of norovirus at Baywood Court Retirement Community in Castro Valley that 
has placed the residents under a voluntary quarantine for the past 2 weeks and 
prompted the temporary shutdown of the facility’s dining hall. A Santa Rosa senior 
facility was also placed under voluntary quarantine due to a norovirus outbreak. 

Source: http://www.mercurynews.com/breaking-news/ci 249283 17/norovirus- 
outbreak-at-castro-vallev-senior-living-facility 

16. January 16, U.S. Food and Drug Administration - (International) The Mentholatum 
Company issues voluntary nationwide recall of Rohto eye drops made in Vietnam. 
The Mentholatum Company announced January 16 that it is voluntarily recalling all 
retail level Rohto eye drop products, sold nationwide and manufactured in Vietnam, 
due to sterility issues. 

Source: http://www.fda.gov/Safety/Recalls/ucm382076.htm 
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Government Facilities Sector 

17. January 17, WTVA 9 Tupelo - (Mississippi) Mississippi Valley State closed because 
of bomb threat. Mississippi Valley State University cancelled evening classes January 
16 and closed campus January 17 due to a bomb threat. Officials planned to search and 
secure all campus buildings as well as the Leflore County Civic Center before classes 
resumed January 21. 

Source: http://www.wtva.com/news/national/storv/Mississippi-VaHev-State-closed- 
because-of-bomb/xdOYPAcsaUqgOW9aLTyg5g.cspx 

18. January 16, KTLA 5 Los Angeles - (California) Firefight continues in 1,700-acre 
Colby Fire; blaze 30% contained. Authorities arrested 3 men and charged them with 
starting the 1,700-acre Colby Fire in the San Gabriel Mountains that destroyed 5 homes 
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and damaged 17 other structures. Firefighters reached 30 percent containment January 
16. 

Source: http://ktla.com/2014/01/16/firefighters-battling-brushfire-north-of-glendora 



19. January 16, Macon Telegraph - (Georgia) Driver cited in collision with Bibb school 
bus; 6 students injured. Seven people, including six students, were injured after a 
Howard High School bus and a car collided in Bibb County January 16. 

Source: http://www.macon.com/2014/01/16/2882511/bibb-schoolbus-reportedly- 
involved.html 

20. January 16, Hawaii News Now - (Hawaii) Navy: Fuel found outside steel Hawaii 
tank. The U.S. Navy confirmed January 16 that a tank at the Red Hill Underground 
Fuel Storage Facility in Honolulu did leak jet fuel after fuel operators noticed a 
discrepancy in the levels. Pumps to four water wells in the area were shut off as a 
precaution while authorities investigated how much fuel leaked. 

Source: http://www.hawaiinewsnow.com/storv/24476783/navy-fuel-found-outside- 
steel-hawaii-tank 

21. January 16, Fredericksburg.com - (Virginia) Locust Grove student charged in 
threat. Officials charged a student at Locust Grove Middle School in Orange County, 
Virginia, in connection to a bomb threat, after the school was evacuated and classes 
were dismissed January 16 when a note containing a threat was found in the building. 
Source: http://news.fredericksburg.com/newsdesk/2014/01/16/locust-grove-student- 
charged-in-threat/ 

22. January 16, Associated Press - (Georgia) 1 killed in Army helicopter ‘hard landing’ 
in Ga. The U.S. Army announced that a member of an elite helicopter unit was killed 
and two crew members were injured January 15 when their MH-60 Black Hawk 
aircraft, returning from a routine training flight, made a hard landing on or near the 
airstrip at Hunter Army Airfield in Savannah. Authorities are investigating the cause of 
the incident. 

Source: http ://abcne w s . go .com/US/wireStorv/killed-army- helicopter-hard-landing- ga- 
21559746 
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Emergency Services Sector 

23. January 16, Food Safety Magazine - (Tennessee) Salmonella outbreak in Tennessee 
jail linked to Tyson contaminated chicken. An outbreak of Salmonella Heidelberg at 
a Tennessee jail that sickened nine inmates was likely caused by tainted chicken 
produced by Tyson Foods, Inc., as indicated by a State investigation. Federal and 
Tennessee public health officials are collaborating in the ongoing investigation. 

Source: http://www.foodsafetvmagazine.com/news/salmonella-outbreak-in-tennessee- 
jail-linked-to-tyson-comminuted-chicken/ 
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Information Technology Sector 

24. January 17, Softpedia - (International) At least one smart refrigerator used in 
massive cyberattack. Researchers at Proofpoint analyzed a large-scale spam campaign 
that involved over 750,000 malicious emails and found that more than 100,000 
Internet-connected consumer electronic devices were used in the attack, including 
multimedia centers, smart TVs, routers, and at least one smart refrigerator. 

Source: http://news.softpedia.com/news/At-Least-One-Smart-Refrigerator-Used-in- 
Massive-C yberattack-4 17878. shtml 

25. January 17, Threatpost - (International) SCADA company patches HMI zero day 
disclosed at S4 conference. Ecava released a patch for its IntegraXor supervisory 
control and data acquisition (SCADA) interface software January 16 that addresses a 
zero-day vulnerability disclosed January 15 at a security conference. 

Source: http://threatpost.com/scada-company-patches-hmi-zero-dav-disclosed-at-s4- 
conference/103682 

26. January 17, The Register - (International) Bitcoin’s so over. We’re mining 
Primeco...Oh SNAP, my box is a ZOMBIE! A researcher at Panda Security 
discovered several malicious mining programs for the Primecoin digital currency that 
include malware that can compromise users’ systems, hide itself as rootkits, disable 
antivirus programs, and allow the computer to be used as part of a botnet. 

Source: 

http://www.theregister.co.uk/2014/01/17/primecoin malware miner discovered/ 

27. January 17, Softpedia - (International) Trojan disguised as legitimate applications 
uses infected PCs to mine Litecoins. Researchers at Doctor Web identified a trojan 
disguised as legitimate applications and browser extensions that uses infected systems 
to mine for the Litecoin digital currency. The trojan is signed with digital certificates 
from legitimate applications and has infected over 31 1,000 computers, mostly in the 
U.S. 

Source: http://news.softpedia.com/news/Troian-Disguised-as-Legitimate-Applications- 
Uses-Infected-PCs-to-Mine-Litecoins-418152.shtml 

28. January 17, Softpedia - (International) Humor website Cracked.com serves 
malware, again. Barracuda Labs researchers found that humor Web site Cracked.com 
was compromised the week of January 13 and being used to redirect users to pages that 
serve malware by exploiting browser and Java vulnerabilities. The site was previously 
compromised to serve malware in November 2013 

Source: http://news.softpedia.com/news/Humor-Website-Cracked-com-Servers- 
Malware-Again-4181 14.shtml 

29. January 16, Softpedia - (International) Cybercriminals are distributing malware 
with fake Flash Player served from SkyDrive. Researchers at L-Secure discovered a 
recent spike in Trojan. JS.Blacole. Gen infections originating from a malware campaign 
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that uses compromised Web sites to redirect users and attempts to get them to install 
fake Flash Player updates. The trojan is then downloaded from a Microsoft SkyDrive 
account. 

Source: http://news.softpedia.com/news/Cybercriminals-Are-Distributing-Malware- 
with-Fake-Flash-Player-Served-from-SkyDrive-417819.shtml 

For another story, see item 4 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

30. January 16, Press Democrat Santa Rosa - (California) Airport area businesses hit by 
internet outage. Many businesses in Santa Rosa’s Airport Park were without Internet 
and in some cases telephone service since January 15 because transmission cables were 
accidently severed during a construction project. AT&T worked to repair cables and 
restore service by January 17. 

Source: http://www.pressdemocrat.com/article/20140116/articles/140119662 



[ Return to top ] 



Commercial Facilities Sector 

31. January 17, WSAZ 3 Huntington - (West Virginia) Mardi Gras Casino and Resort 
reopens after water emergency. The Mardi Gras Resort and Casino in Cross Lanes, 
West Virginia, reopened January 17 after a flushing of its water system caused water 
mains to rupture, forcing the casino to close January 16. Food and beverage outlets 
remain closed pending health inspections. 

Source: http://www.wsaz.com/news/headlines/Mardis-Gras-Casino-and-Resort-Close- 
due-to-Water-Emergency-24067368 1 .html 

32. January 17, WLS 7 Chicago - (Illinois) South Side blaze injures Chicago firefighter. 
A fire broke out a South Side Chicago retail store and spread to an adjacent business 
January 17, leaving extensive damage and injuring one firefighter. Authorities are 
investigating the cause of the fire. 

Source: 

http://abclocal.go.com/wls/storv?section=news/local/chicago news&id=9396935 

33. January 16, St. Louis Post-Dispatch - (Illinois) Bomb threat leads to evacuation of 
St. Clair Square Mall. The St. Claire Square Mall in Fairview Heights, Illinois, was 
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evacuated and closed January 16 after a phoned bomb threat claiming several devices 
were left inside the mall. Authorities called off the search after nearly 5 hours once 
nothing suspicious was found. 

Source: http://www.stltodav.com/news/local/crime-and-courts/bomb-threat-leads-to- 
evacuation-of-st-clair-square-mall/article 10646023-48fl-5ba6-9f76- 



9397161088a4.html 



34. January 16, WFMY 2 Greensboro; Montgomery County Emergency Services - (North 

Carolina) Montgomery County Walmart evacuated after bomb threat. A phoned 
bomb threat forced the evacuation of a Walmart and nearby businesses in the 
Montgomery Crossings area of Biscoe for several hours January 16. A search by 
authorities yielded no bombs or explosive devices. 

Source: http://www.digtriad.com/news/article/313191/57/Montgomerv-County- 
Walmart-Evacuated-After-Bomb-Threat- 
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Dams Sector 



Nothing to report 
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NTAS 

MilinvulT'-rTtiiitm Mvfwif Spttm 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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